漏洞描述
Netgate pfSense中存在命令注入漏洞。该漏洞是由于对发送到插件pfBlockerNG的HTTP header验证不正确导致的。
Netgate pfSense pfBlockerNG Host命令注入漏洞
PoC代码
暂无相关漏洞推荐
- POCCVE-2021-41282: pfSense - Arbitrary File Write
- POCCVE-2022-31814: pfSense pfBlockerNG <=2.1..4_26 - OS Command Injection
- POCCVE-2022-40624: pfSense pfBlockerNG - OS Command Injection
- POCCVE-2021-41282: pfSense - Arbitrary File Write
- POCCVE-2022-31814: pfSense pfBlockerNG <=2.1..4_26 - OS Command Injection
- POCCVE-2022-40624: pfSense pfBlockerNG - OS Command Injection
- 无POCNetgate pfSense CVE-2023-42325 跨站脚本漏洞
- 无POCNetgate PfSense diag_packet_capture.php 命令注入漏洞
- 无POCpfSense CVE-2021-41282远程代码执行漏洞
- 无POCNetgate pfSense pfBlockerNG Host CVE-2022-40624命令注入漏洞
- 无POCNetgate pfSense CVE-2023-42326 命令注入漏洞
- 无POCNetgate pfSense firewall_alias.php 存储型跨站脚本漏洞
- 无POCNetgate pfSense restore_rrddata 命令注入漏洞